NEAS[.]a727e260460c30a3a4b88017348fcc90_JC[.]exe | Triage

Sharing

General

Target

NEAS.a727e260460c30a3a4b88017348fcc90_JC.exe
Size

1.1MB
MD5

a727e260460c30a3a4b88017348fcc90
SHA1

d3e7c580d4c6cb10621c2e69e0e57dbd9523bcd9
SHA256

be862663331ec4aef5bee3e87c810e45f883a51a72bf7ffeb211399c4d83b497
SHA512

f8a766155e1d8f74e7e7e138392512612925461a6b63f0af4eabcc8c106ab9ba0c3985af353365b123c2f6192d1ac402d58903eb275632148a0228aca96a3b20
SSDEEP

24576:912gA+6IoNty8SbOhov1kGrfF/OhZaNPuVgeYtv/Lg1V:+gN6XN/aS+kGbFIwlOpY9/La

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a727e260460c30a3a4b88017348fcc90_JC.exe

Files

NEAS.a727e260460c30a3a4b88017348fcc90_JC.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ